Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 14:06

General

  • Target

    新频电影网 v3.0/02.htm

  • Size

    1KB

  • MD5

    fd14f075a5b8b1ad1c2a708ba9e1935b

  • SHA1

    e99043b2c448487314af63721daa1f21e926d8c4

  • SHA256

    397b40c4c79a64dd0ef013da2694c5ac1c2e77a373cfbca11f238f83df10d2d4

  • SHA512

    eedd1cf5291a9803f468ce41c3effb3a3a0ce23cf11984fa7273c94d04a345420a2a5418a0df5ca19ca8fb9cb1f97cf21e54e2fc32e60a58d485c9b4a0fe6cae

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\新频电影网 v3.0\02.htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e3666a526c3c4f041212635cc23509d

    SHA1

    a885957db151f577cd2f1e206488c5295d8d6174

    SHA256

    d81006555b04175d1c98eec493ffeb709933f146fb51997b8490de8889e90293

    SHA512

    701c0e1defe073b4c802a7545d5b4e420fb3f91d716e949e6701b11a2b1588dd6ae92388ad004a1b8cdc4a1b04906ebd61325d5a97bc2c3707ace9b830ae8e48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c0acfb1d9e78b3b254959365dae0d11

    SHA1

    ead2ad6d35c34efba41edce336c20850e41cdf03

    SHA256

    f27995c57eba0c34d37e258cff19026e143070f4f67143cc01ca59aa17f5adb6

    SHA512

    5dd9739df1791588ea84f33fd7b3d394ac9eda8189bad3a3bcbd15a3ca9fd055736cb64145f5593af5d19c532717850b4e4832870c5a528e55bbeff6fbf421f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a49e0bcf5338ddb094430b15ed87b75f

    SHA1

    726330efa8fa562a9a99cb9d5dba1af1477a19a6

    SHA256

    0fef6da8c5f8b9107456725378634445bd638372ee618cc769c0d886636ea427

    SHA512

    397474d2fcae25317aceaddebbd7929e1e1366e510eaca47ddc8437c8410058919d257f47296e49593ef9513351027c3e6a08e15a40df76787763f3694bcce79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e233254ad9aa8a0a85604bd3eb8517f7

    SHA1

    4a133e793e1b8ea46519fa60b09a21e573d976f6

    SHA256

    fe963d89ada166d4164ba931b10a8ff9039c3ff15a3e8ca84ddb862464d5db45

    SHA512

    69ee8c175cb96e2d1b337ecd002c90a72a7eecd687e977a1d79536b6b0e5482f506a5ce8864f3c3f82144e1848055f2d4c2960b4d5753e009a4dc112ca614fd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac4750d2544f8874ca6ed66f63973138

    SHA1

    cec53fad80f5b310f83579396a2522a709e5ab81

    SHA256

    b9e5e5340f0adf1ab410163ac5759fdd439c0a008435305c5f1dffe8bdba7c8e

    SHA512

    807847b4347ad65b353881880ff3806492b18ed0d7aee3c0995cdf0a299b44fc6777c41797574148b00e283edab39bfbbdac4ac920fbc7c0857d4e7035e64a34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9af0f76d081b1269d99154705175ac93

    SHA1

    fc9d495cc128245de9209bf91f4f10c607313e0b

    SHA256

    36fa5d1ff0f0ba4ef4702cb5dd518c636ed1244229835dbfaab11b166cf4a5ef

    SHA512

    2e5c057cce4bdb779e69af3896111c2facc47b848519a4ed0a0b01ee74442308c0ce9ac5e67627c2690f3587ee1869f671eac67361308bab88ae0fc78b097394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4f9fe3c043d1077ae651403661f99d5

    SHA1

    1aa62115f2d7ec79086b33498b7c6a01660a2a89

    SHA256

    1aa1f2268ce062d015459ca6d0a806500d1d42c297f4bca44f6bedb54b95bf68

    SHA512

    8bcde66ab3f56bf619f6859dde2b3f541dd8007f7e62e4ccad874eb390f3602ba1bf6017fb2fb3c4d9396b6b8ebcda9c63a2aefdf0b881e51b12f2df3934b934

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91256ee696f4552a6c90bd7bf7f20feb

    SHA1

    4409bd8a0c87007eb022121ebd4e3a05a51a098e

    SHA256

    8a9cc0f5268d57e45676ce5c9a6722a39d061636abb2bbc3bf268a0967761d24

    SHA512

    c9c780bdace3d29deb055b6208367f0e2221e75476bc6a5747695550266a707fe080daa562cfe39e425949c155be5d17ebe2a925d2a1a237a881af3ca65899a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5e26d289197cb936a1fbda31482f842

    SHA1

    139451bbd01db43f93db194a8cc71df34768792d

    SHA256

    93c359e684d383d5c233d34c9b491ae0e806a78303f50a0c9cffb470dda8dda9

    SHA512

    594d528782875b5af8ad995dea4bbd0b852e7746e2fa463021009714c0bdd412193cb58cd9d6d88156a1c81cc831dccd1b8c7f7e2c4874d706dc55849f30b0ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dbeabbe1df7dbe376d929662a4f9b38

    SHA1

    bef18986b05410a7974a0eb21209c884a34f67fe

    SHA256

    3e18746cd723ef885cd4720184ee656c70dd88a2c35379e76811a50e5790e012

    SHA512

    7f6bb2e522ebdd7139f0c61d4650c25002dcf4f540a0790034338cb48438bd50ad68b23bcd6437051fe195347d6aa69ee94fa5c819eded3ef1a0f02a612d8df1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c90d9ef277112aad9fd4739fd75a4ac5

    SHA1

    ff6c4219af20880e59ffc5dfc40217089840de21

    SHA256

    70a0cee9ea8c8bd019aba313415f33a1d4aee1023573ac40ddbd821f63304e46

    SHA512

    fca1112803d8423a8c66d5a9c4575f0b5955332ac5d33311a94e60cdfe3acd8342c932539dcce00dc4a66d99b60ee678b6852e872f07e2205acf680c91c26007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    300a9564283af884ef417dbcebbeb0d3

    SHA1

    79486bb54248fca28aff68e93e4b47ece7ec6134

    SHA256

    824aa55229de3ce81ae2401609b0ef14a245c74830a39d7d1885662610159109

    SHA512

    1b5c55c094f570636e14baf813cced83de651283d8c142adee5e7557e4490c5515098df8fd758843aa760b62c030599b3fc2627873085112bc30033dcf276c4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77654e2ad32d4a294c9ce40269785e8b

    SHA1

    20efec2ebe7e812d2ba9dfc79f970bafba012bf7

    SHA256

    d8af4b051a8232757cde632ca69c305432a3f70efba084d1527ae43d7b28b5b9

    SHA512

    8c38da44478fd012fea5dae5f11e3eeb555f659bbf77da3462fd0ac9f207917b23df0109486eb5c8a6f204562175297c92a173b1156eda582ae231170829b142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    accc91c8a43ae39a14de8c73d403ab7e

    SHA1

    82bde991dc706761dfed2ff7e60816228b2849c9

    SHA256

    e3737982a2720a33b679ce90904154c49806d7017fe89a2b8f788477464d83be

    SHA512

    8a92bba06a00e75db8507a18cacf082d4e87b6e7ee6665b0a0751786742e9ecdc763091e93a1e86bcd4dc7f592a0285f89b3b170e4bd63d1f22af31888ae2c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4853cfef60223c5b50ad081e718f14d

    SHA1

    4137759246a3e90c8a3ae3ea40f89ea07b5ebb4e

    SHA256

    967eae7f6771f215ba6075a3606464336292094b0c501f3bf64ef955d9a786c4

    SHA512

    1a21bf2be94ba380ea837069eab35e2544abb6fab6a8bce49e1a74f381d421e957518aa1ee4ccf0e5f9846bcd3866003ca905413a26fe89028475ba746bbaddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2eba173a30bcfa8ca78b3072ab59c9df

    SHA1

    5fd857b502dd663f06a3033ff5afadf6666229ce

    SHA256

    3c6ad715057193da972a644a13b2180bae7eb32cf91acebd717b243d2dd16c28

    SHA512

    fc600e106a42549518a66ddae3c9bdc34d675b82f7f94e29f7c98444d31f387202110d5f6cd83ba19401211c7e03b7d9f3cb9c88fa45e7091221dd985478f028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2847aecba14bc853ba87abffe64d3f9

    SHA1

    4e9a263eb73bcf271652024ae62f94a000b4de17

    SHA256

    7adcc274923fff97e198964c732886b3c878c96f3c6bb967bca96d5c279bc603

    SHA512

    1dbb6f6e7ca227709e1e3381a402f4ea59dd18f0f93c0f2fa41c3c9c688b24d3e26a604a3e0af76eab01010723236675363d5186e760e8a207859b60495eec75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    060b4c35cd05a8276a9d5eb8c46e3424

    SHA1

    d7165a28ca2247b904b2646e82dacfa098ee1d40

    SHA256

    fee4f23527d1cbe6b1974e9ec68ca4373d8efbeb0b17ba2bb1c7ff1c7da3a02f

    SHA512

    becabadec33065a56560e435a003bbe0028d3c0a39a092e17be98cf5a831772ce80b5a5139468d08519698905b501c463955a3d028265c85d8df9b8566b4f65e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bbe154bd4b7f293dcb49184465d7864

    SHA1

    bb3b0ad63584e225da41774c7814b2329ebc2a7b

    SHA256

    646c43d087b2fa80dd0a6eda381e3cbbdd38c06bdd156047cd5ede12435b95e7

    SHA512

    ff6289fd8406e494eb4636634222aeb8624265a210d9e094c1f91501d8cb112e15feadf5dfca94ec1128513db6a0fb4dbdd02f442f5ebd5916a2e65029b76a30

  • C:\Users\Admin\AppData\Local\Temp\Cab22AF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2340.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b